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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing Of Claims : 

Please amend the claims as follows: 

1 . (Previously Presented) A portable unit comprising: 
storage means for storing registration data; and 

encryption means for encrypting the registration data stored in said storage 
means in executing personal authentication based on the registration data and new 
input information, and supplying the encrypted registration data to a personal 
authentication unit which is communicatively connected to said portable unit and 
executes the personal authentication by using the registration data obtained by 
decrypting the encrypted registration data. 

2. (Original) A unit according to claim 1 , wherein the registration data is 
personal biological data. 

3. (Original) A unit according to claim 1 , wherein said unit further comprises 
random number generating means for generating a random number when the personal 
authentication is to be executed, and said encryption means comprises means for 
supplying, to said personal authentication unit, a ciphertext obtained by encrypting the 
registration data with a random number generated by said random number generating 
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means and a ciphertext obtained by encrypting the random number with a key held by 
said personal authentication unit. 

4. (Canceled) 

5. (Previously Presented) A portable unit comprising: 
means for storing registration data; and 

encryption means for, in executing a personal authentication based on the 
registration data and new input information, supplying a ciphertext obtained by 
encrypting the registration data stored in the said storage means to a fixed section 
which is communicatively connected to said portable unit and performs transfer 
processing including encryption between said portable unit and a plurality of personal 
authentication units for performing personal authentication by using the registration data 
obtained by decrypting the encrypted registration data. 

6. (Previously Presented) A personal authentication system having tamper 
resistance, comprising: 

a tamper-resistant fixed section including: 

first tamper-resistant decryption means for obtaining registration data by 
decrypting a ciphertext supplied from a portable unit for storing the registration data and 
outputting the ciphertext obtained by encrypting the registration data; 

encryption means for sending a ciphertext obtained by encrypting the registration 
data obtained from said first decryption means with a predetermined cryptographic key; 
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second decryption means for obtaining registration data by decrypting the 
ciphertext sent from said decryption means with a predetermined cryptographic key; 
and 

collation means for collating the registration data obtained from said second 
decryption means with the input information. 

7. (Previously Presented) A computer readable medium used for a tamper- 
resistant portable unit which can communicate with a personal authentication unit for 
executing personal authentication and includes a computer, said medium storing a 
program which when executed performs a method comprising: 

causing said computer to execute a procedure for storing registration data in 
storage means; and 

causing said computer to execute an encryption procedure for encrypting the 
registration data and supplying the obtained ciphertext to said personal authentication 
unit when executing the personal authentication by using the registration data obtained 
by decrypting the encrypted registration data. 

8. (Canceled) 

9. (Previously Presented) A computer readable medium used for a tamper- 
resistant portable unit having a computer and capable of communicating with a personal 
authentication system including a tamper-resistant fixed section which has a computer 
and obtains registration data by decrypting a ciphertext supplied from a tamper-resistant 
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portable unit for storing registration data and outputting a ciphertext obtained by 
encrypting the registration data, encrypts the obtained registration data by using a 
predetermined cryptographic key, and transfers the ciphertext to a plurality of personal 
authentication units for executing personal authentication, and said plurality of tamper- 
resistant personal authentication units each of which has a computer, decrypts the 
ciphertext from said fixed section, and collates obtained information with input 
information, thereby executing a personal authentication, said medium storing a 
program which when executed performs a method comprising: 

causing said computer to execute a procedure for storing registration data; and 
causing said computer to execute an encryption procedure for supplying the 
ciphertext obtained by encrypting the registration data to said fixed section when 
executing the personal authentication by using the registration data obtained by 
decrypting encrypted registration data. 

10. (Previously Presented) A computer readable medium used for a personal 
authentication system including a tamper-resistant fixed section which has a computer 
and obtains registration data by decrypting the ciphertext supplied from a tamper- 
resistant portable unit for storing registration data and outputting a ciphertext obtained 
by encrypting the registration data, encrypts the obtained registration data by using a 
predetermined cryptographic key, and transfers the ciphertext to a plurality of personal 
authentication units for executing personal authentications, and said plurality of tamper- 
resistant personal authentication units each of which has a computer, decrypts the 
ciphertext from said fixed section, and collates obtained information with input 
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information, thereby executing a personal authentication, said medium storing a 
program which when executed performs a method comprising: 

causing said computer of said fixed section to execute a first decryption 
procedure for obtaining registration data by decrypting a ciphertext supplied from said 
portable unit; 

causing said computer of said fixed section to execute a second encrypt 
procedure for encrypting the registration data obtained by the first decryption procedure 
with a predetermined cryptographic key and sending the obtained ciphertext; 

causing said computer of each of said personal authentication units to execute a 
second decryption procedure for obtaining registration data by decrypting the ciphertext 
sent by the second encryption procedure with a predetermined cryptographic key; and 

causing said computer of each of said personal authentication units to execute a 
collation procedure for collating the registration data obtained by the second decrypt 
procedure with the input information. 

1 1 . (Original) A personal authentication system comprising: 
a tamper-resistant portable unit including: 
a memory for storing registration data; 

encryption means for, when a personal authentication is to be executed, 
encrypting the registration data stored in said memory; 

supply means for supplying the registration data encrypted by said encryption 
means to a personal authentication unit; 
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a tamper-resistant personal authentication unit capable of communicating with 
said portable unit, including: 

input means for inputting registration data; 

decryption means for decrypting the encrypted registration data supplied from 
said supply means; and 

collation means for collating the registration data decrypted by said decryption 
means with the registration data input by said input means. 

12. (Original) A system according to claim 1 1 , wherein said portable unit and 
said personal authentication unit further comprise authentication means for performing 
mutual authentication between said portable unit and said personal authentication unit. 

13. (Original) A system according to claim 12, wherein said authentication 
means respectively have certificates and private keys and execute verification of the 
certificates and mutual authentication of authenticating information indicating that said 
unit and said unit mutually have the private keys. 

14. (Original) A system according to claim 13, wherein said portable unit 
verifies the certificate of said personal authentication unit by decrypting a signature of 
an authentication office which is contained in the certificate received from said personal 
authentication unit by using a public key of the authentication office, and performing 
true-false determination of the decryption result by using a name 

of the authentication office. 
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1 5. (Original) A system according to claim 1 1 , wherein the input information 
collated by said collation means is personal biological information. 

16. (Original) A portable unit used for said personal authentication system 
defined in claim 1 1 , comprising: 

random number generating means for generating a random number when the 
personal authentication is to be executed; and 

encryption means for generating a first ciphertext by encrypting the registration 
data with the random number generated by said random number generating means, 
generating a second ciphertext by encrypting the random number by using a key 
obtained from said personal authentication unit, and supplying the first and second 
ciphertexts to said personal authentication unit. 

17. (Original) An article of manufacture comprising: 

a computer readable medium having computer readable program code means 
embodied therein for causing a personal authentication to be performed between a 
portable unit and a personal authentication unit, the computer program code means in 
said article of manufacturing comprising: 

computer readable program code means for causing a computer to encrypt, 
when the personal authentication is to be performed, the registration data and to supply 
the encrypted registration data to the personal authentication unit; 
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computer readable program code means for causing the computer to decrypt the 
encrypted data to obtain the registration data; 

computer readable program code means for causing the computer to input 
registration data; and 

computer readable program code means for causing the computer to collate the 
registration data obtained by the decryption with the inputted registration data. 

18. (Original) A personal authentication system comprising: 
a tamper-resistant portable unit including: 
a memory for storing registration data; 

a tamper-resistant fixed section containing a plurality of personal authentication 
units for performing encryption and transfer processing between said portable unit and 
said plurality of personal authentication units; 

first encryption means for supplying a ciphertext obtained by encrypting the 
registration data stored in said memory to said fixed section; 

the said fixed section including: 

first decryption means for obtaining registration data by decrypting the ciphertext 
supplied from said first encryption means; and 

second encryption means for encrypting the registration data obtained by said 
first decrypting means with a predetermined cryptographic key, and 

sending the obtained ciphertext; 

said plurality of personal authentication units having tamper-resistance is capable 
of executing personal authentications on the basis of the registration data in said 
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portable unit and new input information, each of said personal authentication units 
including: 

second decryption means for obtaining registration data by decrypting the 
ciphertext sent from said second encryption means with a predetermined cryptographic 
key; and 

collation means for collating the registration data obtained by said second 
decryption means with the input information. 

19. (Original) A portable unit used for said personal authentication system 
defined in claim 18, comprising: 

random number generating means for generating a random number when the 
personal authentication is to be executed; and 

first encryption means for supplying, to said fixed section, a ciphertext obtained 
by encrypting the registration data with the random number generated by said random 
number generating means and a ciphertext obtained by encrypting the random number 
with a key of said fixed section. 
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